JP2012114934A5

JP2012114934A5 -

Info

Publication number: JP2012114934A5
Application number: JP2012002506A
Authority: JP
Filing date: 2012-01-10
Publication date: 2012-08-02
Anticipated expiration: 2026-07-10

Description

本発明の局面は、上記の課題を解決するために、以下の構成を採用した。なお、本欄における括弧内の参照符号および補足説明等は、本発明の局面の理解を助けるために後述する実施形態との対応関係を示したものであって、本発明の局面を何ら限定するものではない。 The aspect of the present invention employs the following configuration in order to solve the above problems. Note that the reference numerals in parentheses and supplementary explanations in this section show the correspondence with the embodiments described later in order to help understanding of the aspects of the present invention , and limit the aspects of the present invention in any way. It is not a thing.

第１の局面は、コンテンツデータ（１）を認証する認証装置（ゲーム装置１０）において用いられる認証方法である。認証装置がアクセス可能な記憶手段（メモリカード１７）には、コンテンツデータと、第１ダイジェストテーブル（２）と、第２ダイジェストテーブル（３）と、電子署名（４）とが記憶されている。第１ダイジェストテーブルは、コンテンツデータを構成する部分コンテンツデータに対応するダイジェスト値である１次ダイジェスト値を含む。第２ダイジェストテーブルは、第１ダイジェストテーブルを構成する部分に対応するダイジェスト値である２次ダイジェスト値を含む。電子署名は、当該第２ダイジェストテーブルに含まれる２次ダイジェスト値から生成される。上記認証方法には、第１読み出しステップ（Ｓ１１）と、第１認証ステップ（Ｓ１２〜Ｓ１４）とが含まれる。第１読み出しステップにおいては、第２ダイジェストテーブルと電子署名とを記憶手段から認証装置のメモリ（ＲＡＭ２４）に読み出す。第１認証ステップにおいては、メモリに読み出された電子署名と、メモリに読み出された第２ダイジェストテーブルに含まれる２次ダイジェスト値とを用いてコンテンツデータの正当性を認証する。 The first aspect is an authentication method used in an authentication device (game device 10) that authenticates content data (1). Content data, a first digest table (2), a second digest table (3), and an electronic signature (4) are stored in storage means (memory card 17) accessible by the authentication apparatus. The first digest table includes a primary digest value that is a digest value corresponding to partial content data constituting the content data. The second digest table includes a secondary digest value that is a digest value corresponding to a portion constituting the first digest table. The electronic signature is generated from the secondary digest value included in the second digest table. The authentication method includes a first reading step (S11) and a first authentication step (S12 to S14). In the first reading step, the second digest table and the electronic signature are read from the storage means to the memory (RAM 24) of the authentication device. In the first authentication step, the validity of the content data is authenticated using the electronic signature read into the memory and the secondary digest value included in the second digest table read into the memory.

なお、第１の局面において、コンテンツデータは、複数の部分コンテンツデータによって構成されるものである。１次ダイジェスト値は、各部分コンテンツデータ毎に算出される。第１ダイジェストテーブルは、全ての部分コンテンツデータに対応する１次ダイジェスト値を含んでいてもよい。また、電子署名を生成する際には、例えば、第２ダイジェストテーブルに含まれるデータ（例えば、第２ダイジェストテーブルに含まれる全データ）に対して所定の演算（ハッシュ関数を適用する演算等）が行われる。例えば、電子署名が、第２ダイジェストテーブルのデータに対して所定のハッシュ関数を適用することによって得られるダイジェスト値を所定の秘密鍵で暗号化したデータであってもよい。このとき、第１認証ステップでは、第２ダイジェストテーブルに含まれるデータに対して上記所定の演算を行うことによって生成されるデータと、上記秘密鍵に対応する公開鍵で電子署名を複合化したデータとが一致するか否かを判定してもよい。 In the first aspect , the content data is constituted by a plurality of partial content data. The primary digest value is calculated for each partial content data. The first digest table may include primary digest values corresponding to all partial content data. When generating an electronic signature, for example, a predetermined operation (such as an operation applying a hash function) is performed on data included in the second digest table (for example, all data included in the second digest table). Done. For example, the electronic signature may be data obtained by encrypting a digest value obtained by applying a predetermined hash function to data in the second digest table with a predetermined secret key. At this time, in the first authentication step, data generated by performing the predetermined calculation on the data included in the second digest table and data obtained by combining the electronic signature with the public key corresponding to the secret key It may be determined whether or not.

第２の局面においては、２次ダイジェスト値は、複数の１次ダイジェスト値からなるグループ毎に算出されてもよい。このとき、認証方法には、指定ステップ（Ｓ２１）と、第１算出ステップ（Ｓ２４）と、第２認証ステップ（Ｓ２５）と、第２算出ステップ（Ｓ２７）と、第３認証ステップ（Ｓ２８）とがさらに含まれる。指定ステップにおいては、部分コンテンツデータのうちから読み出すべき部分コンテンツデータを指定する。第１算出ステップにおいては、指定された部分コンテンツデータに対応する１次ダイジェスト値を含むグループから、当該グループに対応する２次ダイジェスト値を算出する。第２認証ステップにおいては、第１算出ステップにおいて算出された２次ダイジェスト値と、指定された部分コンテンツデータに対応する１次ダイジェスト値を含むグループに対応する２次ダイジェスト値とを照合することによってコンテンツデータの正当性を認証する。第２算出ステップにおいては、第２認証ステップにおける認証が成功した場合、指定された部分データから当該部分データのダイジェスト値を算出する。第３認証ステップにおいては、第２算出ステップにおいて算出されたダイジェスト値と、指定された部分データに対応する１次ダイジェスト値とを照合することによってコンテンツデータの正当性を認証する。 In the second aspect , the secondary digest value may be calculated for each group including a plurality of primary digest values. At this time, the authentication method includes a designation step (S21), a first calculation step (S24), a second authentication step (S25), a second calculation step (S27), and a third authentication step (S28). Is further included. In the designation step, partial content data to be read out from the partial content data is designated. In the first calculation step, a secondary digest value corresponding to the group is calculated from the group including the primary digest value corresponding to the designated partial content data. In the second authentication step, by comparing the secondary digest value calculated in the first calculation step with the secondary digest value corresponding to the group including the primary digest value corresponding to the designated partial content data Authenticate the validity of the content data. In the second calculation step, when the authentication in the second authentication step is successful, the digest value of the partial data is calculated from the specified partial data. In the third authentication step, the validity of the content data is authenticated by comparing the digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial data.

なお、第２の局面において、指定ステップでは、認証装置は、コンテンツデータに含まれるデータのうち、（ランダムアクセス等の手法によって）読み出すべきデータが決定したことに応じて、当該読み出すべきデータが含まれる部分コンテンツデータを指定するようにしてもよい。 In the second aspect , in the specifying step, the authentication device includes the data to be read out according to the determination of the data to be read out (by a method such as random access) among the data included in the content data. The partial content data to be specified may be designated.

第３の局面においては、第１認証ステップは、認証装置と記憶手段とがアクセス可能となった後、第２認証ステップが実行される前に実行されてもよい。 In the third aspect , the first authentication step may be executed after the authentication device and the storage unit are accessible and before the second authentication step is executed.

第４の局面においては、部分コンテンツデータから１次ダイジェスト値を算出するためのハッシュ関数と、部分第１ダイジェストテーブルから２次ダイジェスト値を算出するためのハッシュ関数とは同一であってもよい。 In the fourth aspect , the hash function for calculating the primary digest value from the partial content data and the hash function for calculating the secondary digest value from the partial first digest table may be the same.

第５の局面においては、電子署名は、第２ダイジェストテーブルに含まれる複数の２次ダイジェスト値に対応するダイジェスト値に基づいて生成されてもよい。このとき、当該ダイジェスト値を算出するためのハッシュ関数は、部分コンテンツデータから１次ダイジェスト値を算出するためのハッシュ関数よりもセキュリティレベルが高い。 In the fifth aspect , the electronic signature may be generated based on digest values corresponding to a plurality of secondary digest values included in the second digest table. At this time, the hash function for calculating the digest value has a higher security level than the hash function for calculating the primary digest value from the partial content data.

なお、第５の局面において、ハッシュ関数のセキュリティレベルが高い場合には、以下の場合が含まれる。
（ａ）ハッシュ関数でハッシュ値を算出する過程における処理ビット数が相対的に多い。（ｂ）ハッシュ関数で算出した結果であるハッシュ値のビット数が相対的に多い。
（ｃ）（暗号化付きでない関数と対比して）暗号化付きの関数である。 In the fifth aspect , when the security level of the hash function is high, the following cases are included.
(A) The number of processing bits in the process of calculating a hash value with a hash function is relatively large. (B) The number of bits of the hash value, which is the result calculated by the hash function, is relatively large.
(C) A function with encryption (as opposed to a function without encryption).

第６の局面においては、第１ダイジェストテーブルの部分データから２次ダイジェスト値を算出するためのハッシュ関数は、コンテンツデータの部分データから１次ダイジェスト値を算出するためのハッシュ関数よりも、ダイジェスト値を算出するための処理量が少なくてもよい。 In the sixth aspect , the hash function for calculating the secondary digest value from the partial data of the first digest table is a digest value rather than the hash function for calculating the primary digest value from the partial data of the content data. The processing amount for calculating the value may be small.

なお、第６の局面において、ダイジェスト値を算出するための処理量が少ない場合には、以下の場合が含まれる。
（ａ）ハッシュ関数でハッシュ値を算出する過程における処理ビット数が相対的に少ない。
（ｂ）ハッシュ関数で算出した結果であるハッシュ値のビット数が相対的に少ない。
（ｃ）（暗号化付きの関数と対比して）暗号化付きでない関数である。 In the sixth aspect , when the amount of processing for calculating the digest value is small, the following cases are included.
(A) The number of processing bits in the process of calculating a hash value with a hash function is relatively small.
(B) The number of bits of the hash value, which is the result calculated by the hash function, is relatively small.
(C) A function without encryption (as opposed to a function with encryption).

第７の局面においては、第１認証ステップにおいて用いられるハッシュ関数は、部分第１ダイジェストテーブルから２次ダイジェスト値を算出するためのハッシュ関数、および、部分コンテンツデータから１次ダイジェスト値を算出するためのハッシュ関数よりもセキュリティレベルが高くてもよい。 In the seventh aspect , the hash function used in the first authentication step is a hash function for calculating a secondary digest value from the partial first digest table, and a primary digest value from the partial content data. The security level may be higher than the hash function.

第８の局面は、コンテンツデータを認証する認証装置（ゲーム装置１０）である。認証装置がアクセス可能な記憶手段（メモリカード１７）には、コンテンツデータと、当該コンテンツデータを構成する部分コンテンツデータに対応するダイジェスト値である１次ダイジェスト値を含む第１ダイジェストテーブルと、当該第１ダイジェストテーブルを構成する部分第１ダイジェストテーブルに対応するダイジェスト値である２次ダイジェスト値を含む第２ダイジェストテーブルと、当該第２ダイジェストテーブルに含まれる２次ダイジェスト値から生成される電子署名とが記憶されている。認証装置は、読み出し手段（ステップＳ１１を実行するＣＰＵコア２１等。以下、この欄において同様の場合にはステップ番号のみを記載する。）と、認証手段（Ｓ１２〜Ｓ１４）とを備える。読み出し手段は、第２ダイジェストテーブルと電子署名とを記憶手段から認証装置のメモリ（ＲＡＭ２４）に読み出す。認証手段は、メモリに読み出された電子署名と、メモリに読み出された第２ダイジェストテーブルに含まれる２次ダイジェスト値とを用いてコンテンツデータの正当性を認証する。 The eighth aspect is an authentication device (game device 10) that authenticates content data. The storage means (memory card 17) accessible by the authentication device includes content data, a first digest table including a primary digest value that is a digest value corresponding to partial content data constituting the content data, and the first digest table. A second digest table that includes a secondary digest value that is a digest value corresponding to a partial first digest table that constitutes one digest table, and an electronic signature that is generated from the secondary digest value included in the second digest table. It is remembered. The authentication device includes a reading unit (CPU core 21 or the like that executes step S11. Hereinafter, only the step number is described in the same case in this column) and an authentication unit (S12 to S14). The reading unit reads the second digest table and the electronic signature from the storage unit to the memory (RAM 24) of the authentication device. The authenticating unit authenticates the validity of the content data using the electronic signature read into the memory and the secondary digest value included in the second digest table read into the memory.

第９の局面は、コンテンツデータを認証する認証装置（ゲーム装置１０）のコンピュータ（ＣＰＵコア２１等）において実行される認証処理プログラムである。認証装置がアクセス可能な記憶手段（メモリカード１７）には、コンテンツデータと、当該コンテンツデータを構成する部分コンテンツデータに対応するダイジェスト値である１次ダイジェスト値を含む第１ダイジェストテーブルと、当該第１ダイジェストテーブルを構成する部分第１ダイジェストテーブルに対応するダイジェスト値である２次ダイジェスト値を含む第２ダイジェストテーブルと、当該第２ダイジェストテーブルに含まれる２次ダイジェスト値から生成される電子署名とが記憶されている。認証処理プログラムは、読み出しステップ（Ｓ１１）と、認証ステップ（Ｓ１２〜Ｓ１４）とをコンピュータに実行させる。読み出しステップにおいては、コンピュータは、第２ダイジェストテーブルと電子署名とを記憶手段から認証装置のメモリに読み出す。認証ステップにおいては、コンピュータは、メモリに読み出された電子署名と、メモリに読み出された第２ダイジェストテーブルに含まれる２次ダイジェスト値とを用いてコンテンツデータの正当性を認証する。 The ninth aspect is an authentication processing program executed in a computer (CPU core 21 or the like) of an authentication device (game device 10) that authenticates content data. The storage means (memory card 17) accessible by the authentication device includes content data, a first digest table including a primary digest value that is a digest value corresponding to partial content data constituting the content data, and the first digest table. A second digest table that includes a secondary digest value that is a digest value corresponding to a partial first digest table that constitutes one digest table, and an electronic signature that is generated from the secondary digest value included in the second digest table. It is remembered. The authentication processing program causes the computer to execute a reading step (S11) and an authentication step (S12 to S14). In the reading step, the computer reads the second digest table and the electronic signature from the storage unit to the memory of the authentication device. In the authentication step, the computer authenticates the validity of the content data using the electronic signature read into the memory and the secondary digest value included in the second digest table read into the memory.

第１０の局面は、記憶手段に記憶すべきデータを生成するデータ処理方法である。データ処理方法には、第１算出ステップ（Ｓ１）と、第２算出ステップ（Ｓ２）と、電子署名生成ステップ（Ｓ３）と、設定ステップ（Ｓ４）とが含まれる。第１算出ステップにおいては、コンテンツデータを構成する部分コンテンツデータに対応するダイジェスト値である１次ダイジェスト値を算出する。第２算出ステップにおいては、第１算出ステップにおいて算出された第１ダイジェスト値を含む第１ダイジェストテーブルを構成する部分第１ダイジェストテーブルに対応するダイジェスト値である第２ダイジェスト値を算出する。電子署名生成ステップにおいては、第２算出ステップにおいて算出された第２ダイジェスト値を含む第２ダイジェストテーブルから電子署名を生成する。設定ステップにおいては、コンテンツデータと、第１ダイジェストテーブルと、第２ダイジェストテーブルと、電子署名とを記憶手段に記憶すべきデータとして設定する。 The tenth aspect is a data processing method for generating data to be stored in the storage means. The data processing method includes a first calculation step (S1), a second calculation step (S2), an electronic signature generation step (S3), and a setting step (S4). In the first calculation step, a primary digest value that is a digest value corresponding to partial content data constituting the content data is calculated. In the second calculation step, a second digest value that is a digest value corresponding to the partial first digest table that constitutes the first digest table including the first digest value calculated in the first calculation step is calculated. In the electronic signature generation step, an electronic signature is generated from the second digest table including the second digest value calculated in the second calculation step. In the setting step, the content data, the first digest table, the second digest table, and the electronic signature are set as data to be stored in the storage means.

第１１の局面は、データ構造に関する。データ構造には、コンテンツデータと、コンテンツデータを構成する部分コンテンツに対応するダイジェスト値である第１ダイジェスト値を含む第１ダイジェストテーブルと、第１ダイジェストテーブルを構成する部分第１ダイジェストテーブルに対応するダイジェスト値である第２ダイジェスト値を含む第２ダイジェストテーブルと、第２ダイジェストテーブルから生成される電子署名とが含まれる。 The eleventh aspect relates to a data structure. The data structure corresponds to content data, a first digest table that includes a first digest value that is a digest value corresponding to partial content that constitutes the content data, and a partial first digest table that constitutes the first digest table. A second digest table including a second digest value that is a digest value and an electronic signature generated from the second digest table are included.

第１、第８から第１１の局面によれば、電子署名を用いた認証は、コンテンツデータのダイジェスト値を含む第１ダイジェストテーブルではなく、第１ダイジェストテーブルのダイジェスト値を含む第２ダイジェストテーブルを用いて行われる。つまり、電子署名を用いた認証処理において読み出すべきデータは、第１ダイジェストテーブルよりもデータサイズの小さい第２ダイジェストテーブルである。したがって、認証のために要するメモリ容量を従来に比べて低減することができる。また、第１０および第１１の局面によれば、上記局面において用いられるデータ構造を提供することができる。 According to the first, eighth to eleventh aspects , the authentication using the electronic signature is not performed using the first digest table including the digest value of the content data, but the second digest table including the digest value of the first digest table. Done with. That is, the data to be read in the authentication process using the electronic signature is the second digest table having a data size smaller than that of the first digest table. Therefore, the memory capacity required for authentication can be reduced compared to the conventional case. According to the tenth and eleventh aspects , the data structure used in the above aspect can be provided.

第２の局面によれば、認証装置は、第２ダイジェストテーブルだけでなく、第１ダイジェストテーブルおよびコンテンツデータが改ざんされていないか否かを確認する。したがって、コンテンツの正当性をより正確に認証することができる。 According to the second aspect , the authentication device checks whether not only the second digest table but also the first digest table and the content data have been tampered with. Therefore, it is possible to authenticate the correctness of the content more accurately.

第３の局面によれば、第１認証ステップにおいて第２ダイジェストテーブルの正当性が認証された後で、第２および第３認証ステップが実行される。第２および第３認証ステップは、第２ダイジェストテーブルが正当であることを前提とした認証処理であるので、第１認証ステップの後で第２および第３認証ステップを実行することによって、第２および第３認証ステップにおける認証を正確に行うことができる。 According to the third aspect , after the validity of the second digest table is authenticated in the first authentication step, the second and third authentication steps are executed. Since the second and third authentication steps are authentication processes based on the premise that the second digest table is valid, the second and third authentication steps are executed by executing the second and third authentication steps after the first authentication step. And the authentication in a 3rd authentication step can be performed correctly.

第４の局面によれば、１次ダイジェスト値を算出するためのハッシュ関数と、２次ダイジェスト値を算出するためのハッシュ関数とを同一とすることによって、後述する第６の局面に比べて、ハッシュ関数が破られた結果コンテンツデータが自由に改ざんされる可能性を低くすることができる。 According to the fourth aspect , by making the hash function for calculating the primary digest value the same as the hash function for calculating the secondary digest value, compared to the sixth aspect described later, As a result of the hash function being broken, it is possible to reduce the possibility that the content data is freely falsified.

第５および第７の局面によれば、電子署名に用いるハッシュ関数のセキュリティレベルを高くすることによって、ハッシュ関数が破られた結果コンテンツデータが自由に改ざんされる可能性を低くすることができる。 According to the fifth and seventh aspects , by increasing the security level of the hash function used for the electronic signature, it is possible to reduce the possibility of content data being freely altered as a result of the hash function being broken.

第６の局面によれば、上記第４の局面に比べて、第２認証ステップの処理量を軽減することができる。 According to the sixth aspect , the processing amount of the second authentication step can be reduced as compared with the fourth aspect .

Claims

A method used in an authentication device for authenticating content data,
The authentication device has accessible storage means, the content data, a first digest table including primary digest values that correspond to a plurality of partial content data constituting the content data, the plurality of partial content data A second digest table including a secondary digest value calculated for each group of primary digest values corresponding to, and an electronic signature generated using the secondary digest value are stored ,
A first authentication step for performing authentication by the electronic signature ;
A designation step of designating partial content data to be read out of the plurality of partial content data by random access;
A first calculation step of calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authentication step for authenticating the validity of the content data,
A second calculation step of calculating a primary digest value of the partial content data from the specified partial content data;
The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. A third authentication step for authenticating the authentication method.

2. The authentication according to claim 1, further comprising a reading step of reading a group including a primary digest value corresponding to the designated partial content data from the storage unit to the memory of the authentication device before the first calculation step. Method.

The authentication according to claim 1 or 2, wherein a process based on the partial content data designated by the designation step is executed on the condition that the validity is authenticated by the second authentication step and the third authentication step. Method.

The authentication method according to any one of claims 1 to 3, wherein in the designation step, partial content data to be used next is designated as needed in accordance with execution of processing based on the content data.

5. The authentication method according to claim 1, wherein the process based on the content data is executed on condition that the validity is authenticated in the first authentication step.

The first authentication step is executed after the authentication device and the storage unit are accessible, and before the second authentication step and the third authentication step are executed . An authentication method according to any one of the above.

Characterized in that the hash function for calculating a primary digest value from said partial content data, the hash function for calculating a second digest value before Symbol first digest table is the same, according to claim 1 The authentication method in any one of -6 .

The electronic signature is generated based on a digest value corresponding to a plurality of secondary digest values included in a second digest table, and a hash function for calculating the digest value is obtained from the partial content data using a primary digest value. wherein the higher security level than the hash function to calculate the authentication method according to any of claims 1 to 7.

The hash function for calculating a second digest value before Symbol first digest table, than the hash function for calculating a primary digest value from said partial content data, a small amount of processing for calculating the digest value The authentication method according to claim 1, wherein:

The digital signature is generated based on the digest values corresponding to the plurality of secondary digest value included in the second digest table, the secondary from the hash function, before Symbol first digest table for calculating the digest value hash function for calculating the digest value, and wherein the security level is higher than the hash function for calculating a primary digest value from said partial content data, according to any of claims 1 to 6 Authentication method.

An authentication device for authenticating content data,
The authentication device has accessible storage means, the content data, a first digest table including primary digest values that correspond to a plurality of partial content data constituting the content data, the plurality of partial content data A second digest table including a secondary digest value calculated for each group of primary digest values corresponding to, and an electronic signature generated using the secondary digest value are stored ,
A first authentication means for performing authentication with the electronic signature,
Designating means for designating partial content data to be read out of the plurality of partial content data by random access;
First calculation means for calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authenticating means for authenticating the validity of the content data;
Second calculating means for calculating a primary digest value of the partial content data from the specified partial content data;
The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. And a third authentication means for authenticating the authentication device.

An authentication processing program executed in a computer of an authentication device for authenticating content data,
The authentication device has accessible storage means, the content data, a first digest table including primary digest values that correspond to a plurality of partial content data constituting the content data, the plurality of partial content data A second digest table including a secondary digest value calculated for each group of primary digest values corresponding to, and an electronic signature generated using the secondary digest value are stored ,
A first authentication step for performing authentication by the electronic signature ;
A designation step of designating partial content data to be read out of the plurality of partial content data by random access;
A first calculation step of calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authentication step for authenticating the validity of the content data,
A second calculation step of calculating a primary digest value of the partial content data from the specified partial content data;
The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. and a third authentication step for authenticating the causes the computer to perform the authentication processing program.

  A computer-readable storage medium storing a data structure used in an authentication device for authenticating content data,
  The data structure is
    The content data;
    A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data;
    A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data;
    An electronic signature generated using the secondary digest value,
  The first digest table, the second digest table, and the electronic signature are data supplied to a memory of the authentication device,
  In the authentication device, first authentication by the electronic signature is performed,
  The plurality of partial content data is data in which partial content data to be read out of the plurality of partial content data is supplied to the memory of the authentication device by random access,
  In the authentication apparatus, a secondary digest value corresponding to the group is calculated from a group including a primary digest value corresponding to the supplied partial content data included in the primary digest table, and the calculated secondary By comparing the digest value with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the supplied partial content data, the validity of the content data is verified. Second authenticated,
  In the authentication apparatus, a primary digest value of the partial content data is calculated from the supplied partial content data, and the primary digest value corresponding to the calculated primary digest value and the supplied partial content data is calculated. A storage medium in which the validity of the content data is third-authenticated by collating with a primary digest value included in a table.

  An authentication system for authenticating content data,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature generated using the secondary digest value are stored;
  First authentication means for performing authentication by the electronic signature;
  Designating means for designating partial content data to be read out of the plurality of partial content data by random access;
  First calculation means for calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
  The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authenticating means for authenticating the validity of the content data;
  Second calculating means for calculating a primary digest value of the partial content data from the specified partial content data;
  The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. An authentication system comprising: third authentication means for authenticating

  A method used in an authentication device for authenticating content data,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature generated using the secondary digest value are stored;
  A first authentication step for performing authentication by the electronic signature;
  A designation step for sequentially designating partial content data to be read out of the plurality of partial content data during execution of the content data;
  A first calculation step of calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
  The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authentication step for authenticating the validity of the content data,
  A second calculation step of calculating a primary digest value of the partial content data from the specified partial content data;
  The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. A third authentication step for authenticating the authentication method.

16. The authentication according to claim 15, further comprising a read step of reading a group including a primary digest value corresponding to the designated partial content data from the storage unit to the memory of the authentication device before the first calculation step. Method.

The authentication according to claim 15 or 16, wherein a process based on the partial content data designated by the designation step is executed on the condition that the legitimacy is authenticated by the second authentication step and the third authentication step. Method.

The authentication method according to any one of claims 15 to 17, wherein in the designation step, partial content data to be used next is designated as needed in accordance with execution of processing based on the content data.

The authentication method according to claim 15, wherein the process based on the content data is executed on the condition that the validity is authenticated by the first authentication step.

The first authentication step is executed after the authentication device and the storage unit are accessible, and before the second authentication step and the third authentication step are executed. An authentication method according to any one of the above.

16. The hash function for calculating a primary digest value from the partial content data and the hash function for calculating a secondary digest value from the first digest table are the same. The authentication method according to any one of 20.

The electronic signature is generated based on a digest value corresponding to a plurality of secondary digest values included in a second digest table, and a hash function for calculating the digest value is obtained from the partial content data using a primary digest value. The authentication method according to any one of claims 15 to 21, wherein the security level is higher than a hash function for calculating the value.

The hash function for calculating the secondary digest value from the first digest table has a smaller processing amount for calculating the digest value than the hash function for calculating the primary digest value from the partial content data. The authentication method according to any one of claims 15 to 21, characterized in that:

The electronic signature is generated based on digest values corresponding to a plurality of secondary digest values included in the second digest table, and a hash function for calculating the digest value is obtained from the first digest table. The security level is higher than a hash function for calculating a value and a hash function for calculating a primary digest value from the partial content data, according to any one of claims 15 to 21, Authentication method.

  An authentication device for authenticating content data,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature generated using the secondary digest value are stored;
  First authentication means for performing authentication by the electronic signature;
  Designation means for sequentially designating partial content data to be read from among the plurality of partial content data during execution of the content data;
  First calculation means for calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
  The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authenticating means for authenticating the validity of the content data;
  Second calculating means for calculating a primary digest value of the partial content data from the specified partial content data;
  The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. And a third authentication means for authenticating the authentication device.

  An authentication processing program executed in a computer of an authentication device for authenticating content data,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature generated using the secondary digest value are stored;
  A first authentication step for performing authentication by the electronic signature;
  A designation step for sequentially designating partial content data to be read out of the plurality of partial content data during execution of the content data;
  A first calculation step of calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
  The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authentication step for authenticating the validity of the content data,
  A second calculation step of calculating a primary digest value of the partial content data from the specified partial content data;
  The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. An authentication processing program for causing the computer to execute a third authentication step for authenticating.

  A computer-readable storage medium storing a data structure used in an authentication device for authenticating content data,
  The data structure is
    The content data;
    A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data;
    A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data;
    An electronic signature generated using the secondary digest value,
  The first digest table, the second digest table, and the electronic signature are data supplied to a memory of the authentication device,
  In the authentication device, first authentication by the electronic signature is performed,
  The plurality of partial content data is data in which partial content data to be read from among the plurality of partial content data is sequentially supplied to the memory of the authentication device during execution of the content data,
  In the authentication apparatus, a secondary digest value corresponding to the group is calculated from a group including a primary digest value corresponding to the supplied partial content data included in the primary digest table, and the calculated secondary By comparing the digest value with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the supplied partial content data, the validity of the content data is verified. Second authenticated,
  In the authentication apparatus, a primary digest value of the partial content data is calculated from the supplied partial content data, and the primary digest value corresponding to the calculated primary digest value and the supplied partial content data is calculated. A storage medium in which the validity of the content data is third-authenticated by collating with a primary digest value included in a table.

  An authentication system for authenticating content data,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature generated using the secondary digest value are stored;
  First authentication means for performing authentication by the electronic signature;
  Designation means for sequentially designating partial content data to be read from among the plurality of partial content data during execution of the content data;
  First calculation means for calculating a secondary digest value corresponding to the group from a group including a primary digest value corresponding to the designated partial content data included in the primary digest table;
  The secondary digest value calculated in the first calculation step is collated with the secondary digest value included in the secondary digest table corresponding to the group including the primary digest value corresponding to the designated partial content data. A second authenticating means for authenticating the validity of the content data;
  Second calculating means for calculating a primary digest value of the partial content data from the specified partial content data;
  The validity of the content data is verified by comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data and included in the primary digest table. An authentication system comprising: third authentication means for authenticating

  A method used in an authentication apparatus for authenticating content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature for authenticating the validity of the digest table are stored;
  A first authentication step of authenticating a digest table using the electronic signature; a designation step of designating partial content data to be read out of the plurality of partial content data by random access;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A second authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. A third authentication step of authenticating.

30. The authentication according to claim 29, further comprising a read step of reading a group including a primary digest value corresponding to the designated partial content data from the storage unit to the memory of the authentication device before the first calculation step. Method.

The authentication according to claim 29 or 30, wherein the process based on the partial content data designated by the designation step is executed on the condition that the validity is authenticated by the second authentication step and the third authentication step. Method.

32. The authentication method according to claim 29, wherein in the designation step, partial content data to be used next is designated as needed in accordance with execution of processing based on the content data.

The authentication method according to any one of claims 29 to 32, wherein the process based on the content data is executed on the condition that the validity is authenticated by the first authentication step.

The first authentication step is performed after the authentication device and the storage unit are accessible, and before the second authentication step and the third authentication step are performed. An authentication method according to any one of the above.

30. The hash function for calculating a primary digest value from the partial content data and the hash function for calculating a secondary digest value from the first digest table are the same. 34. The authentication method according to any one of 34.

The electronic signature is generated based on a digest value corresponding to a plurality of secondary digest values included in a second digest table, and a hash function for calculating the digest value is obtained from the partial content data using a primary digest value. 36. The authentication method according to any one of claims 29 to 35, wherein a security level is higher than that of a hash function for calculating.

The hash function for calculating the secondary digest value from the first digest table has a smaller processing amount for calculating the digest value than the hash function for calculating the primary digest value from the partial content data. The authentication method according to any one of claims 29 to 34, wherein:

  An authentication device for authenticating content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature for authenticating the validity of the digest table are stored;
  First authentication means for authenticating the validity of a digest table using the electronic signature; designation means for designating partial content data to be read out of the plurality of partial content data by random access;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A second authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication apparatus comprising: third authentication means for authenticating.

  An authentication processing program executed in a computer of an authentication apparatus that authenticates content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature for authenticating the validity of the digest table are stored;
  A first authentication step of authenticating a digest table using the electronic signature; a designation step of designating partial content data to be read out of the plurality of partial content data by random access;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A second authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication processing program for causing the computer to execute a third authentication step for authentication.

  A computer-readable storage medium storing a data structure used in an authentication device that authenticates content data using a digest table including a digest value,
  The data structure is
    The content data;
    A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data;
    A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data;
    Including an electronic signature for authenticating the validity of the digest table,
  The first digest table, the second digest table, and the electronic signature are data supplied to a memory of the authentication device,
  In the authentication device, the validity of the digest table is first authenticated using the supplied electronic signature,
  The plurality of partial content data is data in which partial content data to be read out of the plurality of partial content data is supplied to the memory of the authentication device by random access,
  In the authentication apparatus, a secondary digest value of a group corresponding to the supplied partial content data is calculated using a digest value of the primary digest table, and the calculated secondary digest value and the secondary digest value are calculated. The validity of the content data is second-authenticated by collating with a secondary digest value of the group corresponding to the supplied partial content data in the table,
  In the authentication device, a primary digest value of the partial content data is calculated using the supplied partial content data, the calculated primary digest value, and the supplied portion in the primary digest table. A storage medium in which the validity of the content data is third-authenticated by collating with a primary digest value corresponding to the content data.

  An authentication system for authenticating content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including a secondary digest value calculated for each corresponding group of primary digest values, and an electronic signature for authenticating the validity of the digest table are stored;
  First authentication means for authenticating the validity of a digest table using the electronic signature; designation means for designating partial content data to be read out of the plurality of partial content data by random access;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A second authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication system comprising third authentication means for authentication.

  A method used in an authentication device for authenticating content data using a digest table including a digest value, wherein the storage means accessible by the authentication device includes the content data and a plurality of parts constituting the content data A first digest table including primary digest values corresponding to content data and a second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data are stored. Has been
  A designation step of designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. A second authentication step of authenticating.

43. The authentication according to claim 42, further comprising a read step of reading a group including a primary digest value corresponding to the designated partial content data from the storage unit to the memory of the authentication device before the first calculation step. Method.

44. The authentication according to claim 42 or 43, wherein a process based on the partial content data designated by the designation step is executed on condition that the validity has been authenticated by the second authentication step and the third authentication step. Method.

45. The authentication method according to any one of claims 42 to 44, wherein in the designation step, partial content data to be used next is designated as needed in accordance with execution of processing based on the content data.

43. A hash function for calculating a primary digest value from the partial content data and a hash function for calculating a secondary digest value from the first digest table are the same. 45. The authentication method according to any one of 45.

The hash function for calculating the secondary digest value from the first digest table has a smaller processing amount for calculating the digest value than the hash function for calculating the primary digest value from the partial content data. 46. The authentication method according to any one of claims 42 to 45, wherein:

  An authentication device for authenticating content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including secondary digest values calculated for each corresponding group of primary digest values is stored;
  Designating means for designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated by the first calculation means with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated by the second calculation means with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication device comprising: a second authentication unit for authenticating.

  An authentication processing program executed in a computer of an authentication apparatus that authenticates content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including secondary digest values calculated for each corresponding group of primary digest values is stored;
  A designation step of designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication processing program for causing the computer to execute a second authentication step for authentication.

  A computer-readable storage medium storing a data structure used in an authentication device that authenticates content data using a digest table including a digest value,
  The data structure is
    The content data;
    A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data;
    A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data,
  The plurality of partial content data is data supplied to the memory of the authentication device by random access during execution of the content data, from among the plurality of partial content data.
  In the authentication apparatus, a secondary digest value of a group corresponding to the supplied partial content data is calculated using a digest value of the primary digest table, and the calculated secondary digest value and the secondary digest value are calculated. The validity of the content data is first authenticated by collating with a secondary digest value of a group corresponding to the supplied partial content data in the table,
  In the authentication device, a primary digest value of the partial content data is calculated using the supplied partial content data, the calculated primary digest value, and the supplied portion in the primary digest table. A storage medium in which the validity of the content data is second-authenticated by collating with a primary digest value corresponding to the content data.

  An authentication system for authenticating content data using a digest table including a digest value,
  The storage means accessible by the authentication device includes the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial content data. A second digest table including secondary digest values calculated for each corresponding group of primary digest values is stored;
  Designating means for designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated by the first calculation means with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated by the second calculation means with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication system comprising: a second authentication means for authenticating.

  A method used in an authentication apparatus that authenticates a digest table using an electronic signature and authenticates content data using a digest table, wherein the storage device accessible by the authentication apparatus includes at least the content data A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and a secondary calculated for each group of primary digest values corresponding to the plurality of partial content data. A second digest table including digest values is stored,
  A designation step of designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. A second authentication step of authenticating.

53. The authentication according to claim 52, further comprising a reading step of reading a group including a primary digest value corresponding to the designated partial content data from the storage unit to the memory of the authentication device before the first calculation step. Method.

54. The authentication according to claim 52 or 53, wherein a process based on the partial content data designated by the designation step is executed on condition that the validity is authenticated by the second authentication step and the third authentication step. Method.

55. The authentication method according to any one of claims 52 to 54, wherein in the designation step, partial content data to be used next is designated as needed in accordance with execution of processing based on the content data.

53. The hash function for calculating a primary digest value from the partial content data and the hash function for calculating a secondary digest value from the first digest table are the same. 55. The authentication method according to any one of 55.

The hash function for calculating the secondary digest value from the first digest table has a smaller processing amount for calculating the digest value than the hash function for calculating the primary digest value from the partial content data. The authentication method according to any one of claims 52 to 55, wherein:

  An authentication device that authenticates a digest table using an electronic signature and authenticates content data using the digest table,
  The storage means accessible by the authentication apparatus includes at least the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial contents. A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the data;
  Designating means for designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated by the first calculation means with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated by the second calculation means with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication device comprising: a second authentication unit for authenticating.

  An authentication processing program executed in a computer of an authentication device that authenticates a digest table using an electronic signature and authenticates content data using the digest table,
  The storage means accessible by the authentication apparatus includes at least the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial contents. A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the data;
  A designation step of designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  A first calculation step of calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated in the first calculation step with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication step for authenticating the sex;
  A second calculation step of calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated in the second calculation step with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication processing program for causing the computer to execute a second authentication step for authentication.

  A computer-readable storage medium that stores a data structure used in an authentication device that authenticates a digest table using an electronic signature and authenticates content data using the digest table,
  The data structure is at least
    The content data;
    A first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data;
    A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the plurality of partial content data,
  The plurality of partial content data is data supplied to the memory of the authentication device by random access during execution of the content data, from among the plurality of partial content data.
  In the authentication apparatus, a secondary digest value of a group corresponding to the supplied partial content data is calculated using a digest value of the primary digest table, and the calculated secondary digest value and the secondary digest value are calculated. The validity of the content data is first authenticated by collating with a secondary digest value of a group corresponding to the supplied partial content data in the table,
  In the authentication device, a primary digest value of the partial content data is calculated using the supplied partial content data, the calculated primary digest value, and the supplied portion in the primary digest table. A storage medium in which the validity of the content data is second-authenticated by collating with a primary digest value corresponding to the content data.

  An authentication system that authenticates a digest table using an electronic signature and authenticates content data using the digest table,
  The storage means accessible by the authentication apparatus includes at least the content data, a first digest table including primary digest values corresponding to a plurality of partial content data constituting the content data, and the plurality of partial contents. A second digest table including secondary digest values calculated for each group of primary digest values corresponding to the data;
  Designating means for designating partial content data to be read out of the plurality of partial content data by random access during execution of the content data;
  First calculation means for calculating a secondary digest value of a group corresponding to the designated partial content data using a digest value of the primary digest table;
  By verifying the secondary digest value calculated by the first calculation means with the secondary digest value of the group corresponding to the designated partial content data in the secondary digest table, the content data is validated. A first authentication means for authenticating the sex;
  Second calculation means for calculating a primary digest value of the partial content data using the designated partial content data;
  By comparing the primary digest value calculated by the second calculation means with the primary digest value corresponding to the designated partial content data in the primary digest table, the validity of the content data is verified. An authentication system comprising: a second authentication means for authenticating.